If this is your first visit, be sure to
check out the FAQ by clicking the
link above. You may have to register
before you can post: click the register link above to proceed. To start viewing messages,
select the forum that you want to visit from the selection below.

Hybrid View

Trojan-PSW.Win32.WOW.rg

Hi!

I did a virus scan today and this is what it found: Trojan-PSW.Win32.WOW.rg

In these files:

Found in C:\Program\Spel\World Of Warcraft\BackgroundDownloader.exe
Found in C:\Program\Spel\World Of Warcraft\WoW-2.0.12.6546-to-2.1.0.6692-enGB-downloader.exe
Found in C:\Program\Spel\World Of Warcraft\WoW-2.1.0.6692-to-2.1.0.6729-enGB-downloader.exe

And of course also in the System Volume Information\_restore in several places.

Auto-repair failed and the files were quarantined.

These must be false warnings I guess? I use WoW and as far as I know these are legitimate updates and files.
Is this a known issue? I'm sure that other people have informed ZoneAlarm about this if these are false alarms, since there are 9 million users of World Of Warcraft...

Re: Trojan-PSW.Win32.WOW.rg

Might be false alarm if these are official patches.The KAV6 anti-virus sometimes crops up with weird false positives.If you haven't found weird activity when using WOW, it could be just a false alarm.Here's all I can find about the rg variant (not much)http://www.viruslist.com/en/viruses/...virusid=161981I suggest you ask Blizzard tech support if the KAV6 anti-virus has been accidently flagging their updates with this kind of issue.

Re: Trojan-PSW.Win32.WOW.rg

EDIT: looks like a false positive... wait some hours and it should be fixed...Hi!is "C:\Program\Spel\" where you installed the software and not in "programfiles"?You could upload the files at www.virustotal.com and check what other scanners are saying about it.False positives can be sent to newvirus at kasperskty dot com, subject: false positive. Attach the file, in zipped form and password protect it. (include password in the e-mail)If it is confirmed its a real trojan you need toperform a full Antivirus/Antispyware scan but in SAFE MODE.1. Disable system restore;2. Reboot in SAFE MODE3. Manual run ZASS (ZA firewall will be OFF but Antivirus/Antispyware will be functional)3. Run a full ZA AV/AS scan4. Reboot in Normal Mode5. Ensable System restoreHow to start in SAFE MODE: http://www.microsoft.com/resources/d..._failsafe.mspxHow to disable windows SYSTEM RESTORE:http://support.microsoft.com/kb/310405Cheers,Fax